Comprehensive QoS policies and security mechanisms
The S7500 Series layer 3 Managed Switch supports strict ARP learning, which prevents ARP spoofing attacks that exhaust ARP entries,The S7500 10GE Static Routing Switch also provides IP source guard to prevent DoS attacks caused by MAC address spoofing, IP address spoofing, and MAC/IP spoofing.
The S7500 Series layer 3 Managed Switch supports DHCP snooping, which generates user binding entries based on users’ access interfaces, MAC addresses, IP addresses, IP address leases, and VLAN IDs. DHCP snooping discards invalid packets that do not match any binding entries, such as ARP spoofing packets and IP spoofing packets.This prevents hackers from using ARP packets to initiate man-in-the-middle attacks on campus networks.The interface connected to a DHCP server can be configured as a trusted interface to protect the system against bogus DHCP server attacks.